ZyXEL Communications NWA1123-ACv2 User Manual
  1. Manuals
  2. Brands
  3. ZyXEL Communications Manuals
  4. Wireless Access Point
  5. NWA1123-ACv2
  6. User manual

ZyXEL Communications NWA1123-ACv2 User Manual

802.11ac dual-radio ceiling mount poe access point
Hide thumbs Also See for NWA1123-ACv2:
Table of Contents

Advertisement

Quick Links

See also: User Manual
NWA1123-ACv2
802.11ac Dual-Radio Ceiling Mount PoE Access Point
Version 4.26
Edition 1, 07/2016
Quick Start Guide
User's Guide
Default Login Details
LAN IP Address
www.zyxel.com
User Name
Password
DHCP-assigned IP
or
192.168.1.2
admin
1234
Copyright © 2016 ZyXEL Communications Corporation

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the NWA1123-ACv2 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for ZyXEL Communications NWA1123-ACv2

Summary of Contents for ZyXEL Communications NWA1123-ACv2

  • Page 1 NWA1123-ACv2 802.11ac Dual-Radio Ceiling Mount PoE Access Point Version 4.26 Edition 1, 07/2016 Quick Start Guide User’s Guide Default Login Details LAN IP Address DHCP-assigned IP 192.168.1.2 www.zyxel.com User Name admin Password 1234 Copyright © 2016 ZyXEL Communications Corporation...
  • Page 2 Note: It is recommended you use the Web Configurator to configure the NWA. • Web Configurator Online Help Click the help icon in any screen for help in configuring that screen and supplementary information. • More Information Go to support.zyxel.com to find other information on the NWA. NWA1123-ACv2 User’s Guide...

  • Page 3: Table Of Contents

    Network ..............................49 Wireless ..............................53 User .................................65 AP Profile ..............................72 MON Profile .............................91 WDS Profile .............................95 Certificates ..............................97 System ..............................114 Log and Report .............................139 File Manager ............................152 Diagnostics ............................163 LEDs ..............................165 Reboot ..............................167 Shutdown ..............................168 Troubleshooting ............................169 NWA1123-ACv2 User’s Guide...

  • Page 4: Table Of Contents

    2.3.2 Navigation Panel ........................23 2.3.3 Warning Messages ........................26 2.3.4 Tables and Lists ........................26 Part II: Technical Reference................29 Chapter 3 Dashboard ............................30 3.1 Overview ............................30 3.1.1 What You Can Do in this Chapter ....................30 3.2 Dashboard ............................30 NWA1123-ACv2 User’s Guide...
  • Page 5 6.4.1 Disassociating and Delaying Connections ................60 6.5 DCS ..............................62 6.6 Technical Reference ..........................62 Chapter 7 User..............................65 7.1 Overview ............................65 7.1.1 What You Can Do in this Chapter ....................65 7.1.2 What You Need To Know ......................65 7.2 User Summary ..........................66 NWA1123-ACv2 User’s Guide...
  • Page 6 10.2.1 Add/Edit WDS Profile ......................96 Chapter 11 Certificates ............................97 11.1 Overview ............................97 11.1.1 What You Can Do in this Chapter ..................97 11.1.2 What You Need to Know ......................97 11.1.3 Verifying a Certificate ......................99 11.2 My Certificates ..........................100 NWA1123-ACv2 User’s Guide...
  • Page 7 12.8.4 Adding or Editing an SNMPv3 User Profile .................137 Chapter 13 Log and Report ..........................139 13.1 Overview ............................139 13.1.1 What You Can Do In this Chapter ..................139 13.2 Email Daily Report ........................139 13.3 Log Setting ...........................141 13.3.1 Log Setting ..........................142 NWA1123-ACv2 User’s Guide...
  • Page 8 17.1.1 What You Need To Know .....................167 17.2 Reboot ............................167 Chapter 18 Shutdown............................168 18.1 Overview ............................168 18.1.1 What You Need To Know .....................168 18.2 Shutdown ............................168 Chapter 19 Troubleshooting..........................169 19.1 Overview ............................169 19.2 Power, Hardware Connections, and LED ..................169 NWA1123-ACv2 User’s Guide...
  • Page 9 19.4 Internet Access ..........................171 19.5 Wireless Connections ........................172 19.6 Resetting the NWA ........................175 19.7 Getting More Troubleshooting Help ....................175 Appendix A Importing Certificates ....................176 Appendix B IPv6 ..........................189 Appendix C Customer Support ......................198 Appendix D Legal Information ......................204 Index ..............................213 NWA1123-ACv2 User’s Guide...

  • Page 10: User's Guide

    User’s Guide...

  • Page 11: Introduction

    (VoIP) users have priority. You also want a regular wireless network for standard users, as well as a ‘guest’ wireless network for visitors. In the following figure, VoIP_SSID users have QoS priority, SSID01 is the wireless network for standard users, and Guest_SSID is the wireless network for NWA1123-ACv2 User’s Guide...

  • Page 12: Dual-Radio

    Note: A different channel should be configured for each WLAN interface to reduce the effects of radio interference. You could use the 2.4 GHz band for regular Internet surfing and downloading while using the 5 GHz band for time sensitive traffic like high-definition video, music, and gaming. NWA1123-ACv2 User’s Guide...

  • Page 13: Root Ap

    Figure 3 Root AP Application On the NWA in Root AP mode, you can have multiple SSIDs active for regular wireless connections and one SSID for the connection with a repeater (repeater SSID). Wireless clients can use either NWA1123-ACv2 User’s Guide...

  • Page 14: Repeater

    APs and repeaters must use the same pre-shared key. See Section 6.2 on page 54 Section 10.2 on page 95 for more details. Once the security settings of peer sides match one another, the connection between devices is made. NWA1123-ACv2 User’s Guide...

  • Page 15: Ways To Manage The Nwa

    NWA to its factory default settings. If you backed up an earlier configuration file, you won’t have to totally re-configure the NWA; you can simply restore your last configuration. 1.4 Hardware Connections See your Quick Start Guide for information on making hardware connections. NWA1123-ACv2 User’s Guide...

  • Page 16: Led

    The NWA is receiving/sending wireless traffic. Green Blink Amber The NWA failed to boot up or is experience system failure. Green Amber Fast Blinking (On for The NWA is undergoing firmware upgrade. 50ms, Off for 50ms) Green NWA1123-ACv2 User’s Guide...

  • Page 17: Starting And Stopping The Nwa

    It does not stop the system processes or write cached data to local storage. The NWA does not stop or start the system processes when you apply configuration files or run shell scripts although you may temporarily lose access to network resources. NWA1123-ACv2 User’s Guide...

  • Page 18: The Web Configurator

    The recommended screen resolution is 1024 x 768 pixels and higher. 2.2 Access Make sure your NWA hardware is properly connected. See the Quick Start Guide. Make sure your computer’s IP address is in the range between "192.168.1.3" and "192.168.1.254". Browse to http://192.168.1.2. The Login screen appears. NWA1123-ACv2 User’s Guide...

  • Page 19: Navigating The Web Configurator

    The Update Admin Info screen appears every time you log in using the default user name and default password. If you change the password for the default user account, this screen does not appear anymore. 2.3 Navigating the Web Configurator The following summarizes how to navigate the web configurator from the Dashboard screen. NWA1123-ACv2 User’s Guide...

  • Page 20: Title Bar

    Help Click this to open the help page for the current screen. About Click this to display basic information about the NWA. Site Map Click this to see an overview of links to the Web Configurator screens. NWA1123-ACv2 User’s Guide...
  • Page 21 This shows the date (yyyy-mm-dd) and time (hh:mm:ss) when the firmware is released. Click this to close the screen. Site Map Click Site MAP to see an overview of links to the Web Configurator screens. Click a screen’s link to go to that screen. NWA1123-ACv2 User’s Guide...
  • Page 22 Figure 9 Site Map Object Reference Click Object Reference to open the Object Reference screen. Select the type of object and the individual object and click Refresh to show which configuration settings reference the object. Figure 10 Object Reference NWA1123-ACv2 User’s Guide...

  • Page 23: Navigation Panel

    Use the menu items on the navigation panel to open screens to configure NWA features. Click the arrow in the middle of the right edge of the navigation panel to hide the navigation panel menus or drag it to resize them. The following sections introduce the NWA’s navigation panel menus and their screens. NWA1123-ACv2 User’s Guide...

  • Page 24: Configuration Menu

    Use the configuration menu screens to configure the NWA’s features. Table 7 Configuration Menu Screens Summary FOLDER OR LINK FUNCTION Network IP Setting Configure the IP address for the NWA Ethernet interface. VLAN Manage the Ethernet interface VLAN settings. NWA1123-ACv2 User’s Guide...
  • Page 25 Configuration File Manage and upload configuration files for the NWA. Firmware Package View the current firmware version and to upload firmware. Shell Script Manage and run shell script files for the NWA. Diagnostics Diagnostics Collect diagnostic information. NWA1123-ACv2 User’s Guide...

  • Page 26: Warning Messages

    The options available vary depending on the type of fields in the column. Here are some examples of what you can do: • Sort in ascending alphabetical order • Sort in descending (reverse) alphabetical order • Select which columns to display • Group entries by field • Show entries in groups NWA1123-ACv2 User’s Guide...
  • Page 27 Use the icons and fields at the bottom of the table to navigate to different pages of entries and control how many entries display at a time. NWA1123-ACv2 User’s Guide...
  • Page 28 In some lists you can also use the [Shift] or [Ctrl] key to select multiple entries, and then use the arrow button to move them to the other list. Figure 14 Working with Lists NWA1123-ACv2 User’s Guide...

  • Page 29: Technical Reference

    Technical Reference...

  • Page 30: Dashboard

    Dashboard icon in the navigation panel. The Dashboard displays general device information, system status, system resource usage, and interface status in widgets that you can re- arrange to suit your needs. You can also collapse, refresh, and close individual widgets. NWA1123-ACv2 User’s Guide...
  • Page 31 This field displays the version number and date of the firmware the NWA is currently Version running. Click the icon to open the screen where you can upload firmware. Last Firmware This field displays whether the latest firmware update was successfully completed. Upgrade Status NWA1123-ACv2 User’s Guide...
  • Page 32 This field displays the current date and time in the NWA. The format is yyyy-mm-dd Time hh:mm:ss. Current Login This field displays the user name used to log in to the current session, the amount of User reauthentication time remaining, and the amount of lease time remaining. NWA1123-ACv2 User’s Guide...
  • Page 33 IP address (if it is a backup). IP Assignment This field displays how the interface gets its IP address. Static - This interface has a static IP address. DHCP Client - This interface gets its IP address from a DHCP server. NWA1123-ACv2 User’s Guide...

  • Page 34: Cpu Usage

    This displays the number of detected friendly APs. 3.2.1 CPU Usage Use this screen to look at a chart of the NWA’s recent CPU usage. To access this screen, click CPU Usage in the dashboard. Figure 16 Dashboard > CPU Usage NWA1123-ACv2 User’s Guide...

  • Page 35: Memory Usage

    The x-axis shows the time period over which the RAM usage occurred Refresh Interval Enter how often you want this window to be automatically updated. Refresh Now Click this to update the information in the window right away. NWA1123-ACv2 User’s Guide...

  • Page 36: Monitor

    Friendly APs are other wireless access points that are detected in your network, as well as any others that you know are not a threat (those from neighboring networks, for example). See Chapter 9 on page 91 for details. NWA1123-ACv2 User’s Guide...

  • Page 37: Network Status

    Use this field to get or to update the IP address for the interface. Click Renew to send a new DHCP request to a DHCP server. If the interface cannot use one of these ways to get or to update its IP address, this field displays n/a. NWA1123-ACv2 User’s Guide...

  • Page 38: Network Status Graph

    4.3.1 Network Status Graph Use the port statistics graph to look at a line graph of packet statistics for the NWA’s physical Ethernet port. To view, in the Network Status screen click the Switch to Graphic View button. NWA1123-ACv2 User’s Guide...

  • Page 39: Radio List

    This field displays the date and time the information in the window was last updated. 4.4 Radio List Use this screen to view statistics for the NWA’s wireless radio transmitters. To access this screen, click Monitor > Wireless > AP Information > Radio List. NWA1123-ACv2 User’s Guide...

  • Page 40: Ap Mode Radio Information

    This screen allows you to view a selected radio’s SSID details, wireless traffic statistics and station count for the preceding 24 hours. To access this window, select a radio and click the More Information button in the Radio List screen. NWA1123-ACv2 User’s Guide...
  • Page 41 Chapter 4 Monitor Figure 21 Monitor > Wireless > AP Information > Radio List > More Information NWA1123-ACv2 User’s Guide...

  • Page 42: Station List

    Click this to close this window. 4.5 Station List Use this screen to view statistics pertaining to the associated stations (or “wireless clients”). Click Monitor > Wireless > Station Info to access this screen. Figure 22 Monitor > Wireless > Station Info NWA1123-ACv2 User’s Guide...

  • Page 43: Wds Link Info

    Use this screen to view the WDS traffic statistics between the NWA and a root AP or repeaters. Click Monitor > Wireless > WDS Link Info to access this screen. Figure 23 Monitor > Wireless > WDS Link Info NWA1123-ACv2 User’s Guide...

  • Page 44: Detected Device

    Detected Device to access this screen. Not all NWAs support monitor mode and rogue APs detection. Note: The radio or at least one of the NWA’s radio must be set to monitor mode (in the Wireless > AP Management screen) in order to detect other wireless devices in its vicinity. NWA1123-ACv2 User’s Guide...

  • Page 45: View Log

    In the regular log, you can look at all the log messages by selecting All Logs, or you can select a specific category of log messages (for example, user). You can also look at the debugging log by selecting Debug Log. All debugging messages have the same priority. NWA1123-ACv2 User’s Guide...
  • Page 46 Events that generate an alert (as well as a log message) display in red. Regular logs display in black. Click a column’s heading cell to sort the table entries by that column’s criteria. Click the heading cell again to reverse the sort order. Figure 25 Monitor > Log > View Log NWA1123-ACv2 User’s Guide...
  • Page 47 Source Interface This field displays the source interface of the packet that generated the log message. Destination This field displays the destination IP address and the port number of the event that generated the log message. NWA1123-ACv2 User’s Guide...
  • Page 48 This field displays the service protocol in the event that generated the log message. Note This field displays any additional information about the log message. The Web Configurator saves the filter settings if you leave the View Log screen and return to it later. NWA1123-ACv2 User’s Guide...

  • Page 49: Network

    • The VLAN screen (Section 5.3 on page 51) configures the NWA’s VLAN settings. 5.2 IP Setting Use this screen to configure the IP address for your NWA. To access this screen, click Configuration > Network > IP Setting. NWA1123-ACv2 User’s Guide...
  • Page 50 IPv6 address itself from a prefix obtained from an IPv6 router in the configuration network. (SLAAC) Link-Local This displays the IPv6 link-local address and the network prefix that the NWA generates Address itself for the LAN interface. NWA1123-ACv2 User’s Guide...

  • Page 51: Vlan

    A and the NWA are connected should be in the same VLAN. A Virtual Local Area Network (VLAN) allows a physical network to be partitioned into multiple logical networks. Devices on a logical network belong to one group. A device can belong to more than one NWA1123-ACv2 User’s Guide...
  • Page 52 Select this option to treat this VLAN ID as a VLAN created on the NWA and not one assigned to it from outside the network. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA1123-ACv2 User’s Guide...

  • Page 53: Wireless

    AP list. • The Load Balancing screen (Section 6.4 on page 59) configures network traffic load balancing between the APs and the NWA. • The DCS screen (Section 6.5 on page 62) configures dynamic radio channel selection. NWA1123-ACv2 User’s Guide...

  • Page 54: What You Need To Know

    (AP) or you limit the amount of wireless traffic transmitted and received on it so the AP does not become overloaded. 6.2 AP Management Use this screen to manage the NWA’s general wireless settings. Click Configuration > Wireless > AP Management to access this screen. NWA1123-ACv2 User’s Guide...
  • Page 55 Chapter 6 Wireless Figure 31 Configuration > Wireless > AP Management NWA1123-ACv2 User’s Guide...
  • Page 56 This field displays the SSID profile that is associated with the radio profile. Radio 2 Setting Radio 2 Activate This displays if the NWA has a second radio. Select the check box to enable the NWA’s second radio. NWA1123-ACv2 User’s Guide...

  • Page 57: Mon Mode

    Click Configuration > Wireless > MON Mode to access this screen. NWA1123-ACv2 User’s Guide...
  • Page 58 Click this button to export the current list of either rogue APs or friendly APS. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA1123-ACv2 User’s Guide...

  • Page 59: Add/Edit Rogue/Friendly List

    6.4 Load Balancing Use this screen to configure wireless network traffic load balancing between the APs on your network. Click Configuration > Wireless > Load Balancing to access this screen. Figure 34 Configuration > Wireless > Load Balancing NWA1123-ACv2 User’s Guide...

  • Page 60: Disassociating And Delaying Connections

    6.4.1 Disassociating and Delaying Connections When your AP becomes overloaded, there are two basic responses it can take. The first one is to “delay” a client connection. This means that the AP withholds the connection until the data transfer NWA1123-ACv2 User’s Guide...
  • Page 61 If no connections are idle, the next criteria the NWA analyzes is signal strength. Devices with the weakest signal strength are kicked first. NWA1123-ACv2 User’s Guide...

  • Page 62: Dcs

    In the 2.4 GHz spectrum, each channel from 1 to 13 is broken up into discrete 22 MHz segments that are spaced 5 MHz apart. Channel 1 is centered on 2.412 GHz while channel 13 is centered on 2.472 GHz. NWA1123-ACv2 User’s Guide...
  • Page 63 Rather than let every user connect and subsequently dilute the available bandwidth to the point where each connecting device receives a meager trickle, the load balanced AP instead limits the incoming connections as a means to maintain bandwidth integrity. NWA1123-ACv2 User’s Guide...
  • Page 64 AP has the bandwidth to spare. If too many people connect and the AP hits its bandwidth cap then all new connections must basically wait for their turn or get shunted to the nearest identical AP. NWA1123-ACv2 User’s Guide...

  • Page 65: User

    WWW, TELNET, SSH Perform basic diagnostics (CLI) Access Users user Used for the embedded RADIUS server and SNMPv3 user access Browse user-mode commands (CLI) Note: The default admin account is always authenticated locally, regardless of the authentication method setting. NWA1123-ACv2 User’s Guide...

  • Page 66: User Summary

    The User Add/Edit screen allows you to create a new user account or edit an existing one. 7.2.1.1 Rules for User Names Enter a user name from 1 to 31 characters. The user name can only contain the following characters: NWA1123-ACv2 User’s Guide...
  • Page 67 • root • shutdown • sshd • sync • uucp • zyxel To access this screen, go to the User screen, and click Add or Edit. Figure 42 Configuration > Object > User > Add/Edit A User NWA1123-ACv2 User’s Guide...

  • Page 68: Setting

    Click Cancel to exit this screen without saving your changes. 7.3 Setting This screen controls default settings, login settings, lockout settings, and other user settings for the NWA. To access this screen, login to the Web Configurator, and click Configuration > Object > User > Setting. NWA1123-ACv2 User’s Guide...
  • Page 69 It defines the number of minutes the user can be logged into the NWA in one session before having to log in again. Unlike Lease Time, the user has no opportunity to renew the session without logging out. NWA1123-ACv2 User’s Guide...

  • Page 70: Edit User Authentication Timeout Settings

    To access this screen, go to the Configuration > Object > User > Setting screen, select one of the Default Authentication Timeout Settings entry and click the Edit icon. Figure 44 User > Setting > Edit User Authentication Timeout Settings NWA1123-ACv2 User’s Guide...
  • Page 71 0 to make the number of minutes unlimited. Unlike Lease Time, the user has no opportunity to renew the session without logging out. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 72: Ap Profile

    The SSID (Service Set IDentifier) is the name that identifies the Service Set with which a wireless station is associated. Wireless stations associating to the access point (AP) must have the same SSID. In other words, it is the name of the wireless network that clients use to connect to it. NWA1123-ACv2 User’s Guide...

  • Page 73: Radio

    Click this to add a new radio profile. Edit Click this to edit the selected radio profile. Remove Click this to remove the selected radio profile. Activate To turn on an entry, select it and click Activate. NWA1123-ACv2 User’s Guide...

  • Page 74: Add/Edit Radio Profile

    8.2.1 Add/Edit Radio Profile This screen allows you to create a new radio profile or edit an existing one. To access this screen, click the Add button or select a radio profile from the list and click the Edit button. NWA1123-ACv2 User’s Guide...
  • Page 75 Click this to hide or show the Advanced Settings in this window. Advanced Settings General Settings Activate Select this option to make this profile active. Profile Name Enter up to 31 alphanumeric characters to be used as this profile’s name. Spaces and underscores are allowed. NWA1123-ACv2 User’s Guide...
  • Page 76 3 or 4 channels. Select manual to select the individual channels the NWA switches between. Select channels from the Available channels list and use the right arrow button to move them to the Channels selected list. NWA1123-ACv2 User’s Guide...
  • Page 77 This specifies the time period before the device sends the beacon again. The interval tells receiving devices on the network how long they can wait in low-power mode before waking up to handle the beacon. A high value helps save current consumption of the access point. NWA1123-ACv2 User’s Guide...

  • Page 78: Ssid

    8.3.1 SSID List This screen allows you to create and manage SSID configurations that can be used by the APs. An SSID, or Service Set IDentifier, is basically the name of the wireless network to which a wireless NWA1123-ACv2 User’s Guide...

  • Page 79: Add/Edit Ssid Profile

    8.3.2 Add/Edit SSID Profile This screen allows you to create a new SSID profile or edit an existing one. To access this screen, click the Add button or select a SSID profile from the list and click the Edit button. NWA1123-ACv2 User’s Guide...
  • Page 80 Create new Object menu to create one. Layer-2 isolation allows you to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. The disable setting means no layer-2 isolation is used. NWA1123-ACv2 User’s Guide...

  • Page 81: Security List

    Wireless security is implemented strictly between the AP broadcasting the SSID and the stations that are connected to it. To access this screen click Configuration > Object > AP Profile > SSID > Security List. Note: You can have a maximum of 32 security profiles on the NWA. NWA1123-ACv2 User’s Guide...

  • Page 82: Add/Edit Security Profile

    This screen allows you to create a new security profile or edit an existing one. To access this screen, click the Add button or select a security profile from the list and click the Edit button. Note: This screen’s options change based on the Security Mode selected. Only the default screen is displayed here. NWA1123-ACv2 User’s Guide...
  • Page 83 Chapter 8 AP Profile Figure 50 SSID > Security Profile > Add/Edit Security Profile NWA1123-ACv2 User’s Guide...
  • Page 84 Enter the idle interval (in seconds) that a client can be idle before authentication is discontinued. Authentication Type Select a WEP authentication method. Choices are Open or Share key. Share key is only available if you are not using 802.1x. NWA1123-ACv2 User’s Guide...
  • Page 85 Select Required and wireless clients must support MFP in order to join the NWA’s wireless network. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 86: Mac Filter List

    This screen allows you to create a new MAC filtering profile or edit an existing one. To access this screen, click the Add button or select a MAC filter profile from the list and click the Edit button. Note: Each MAC filtering profile can include a maximum of 512 MAC addresses. NWA1123-ACv2 User’s Guide...

  • Page 87: Layer-2 Isolation List

    Click Cancel to exit this screen without saving your changes. 8.6 Layer-2 Isolation List Layer-2 isolation is used to prevent wireless clients associated with your NWA from communicating with other wireless clients, APs, computers or routers in a network. NWA1123-ACv2 User’s Guide...
  • Page 88 Table 42 Configuration > Object > AP Profile > SSID > Layer-2 Isolation List LABEL DESCRIPTION Click this to add a new MAC filtering profile. Edit Click this to edit the selected MAC filtering profile. Remove Click this to remove the selected MAC filtering profile. NWA1123-ACv2 User’s Guide...

  • Page 89: Add/Edit Layer-2 Isolation Profile

    Click this to remove the selected MAC address from the profile’s list. This field is a sequential value, and it is not associated with a specific user. This field specifies a MAC address associated with this profile. You can click the MAC address to make it editable. NWA1123-ACv2 User’s Guide...
  • Page 90 Enter up to 60 characters, spaces and underscores allowed. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 91: Mon Profile

    Table 44 Configuration > Object > MON Profile LABEL DESCRIPTION Click this to add a new monitor mode profile. Edit Click this to edit the selected monitor mode profile. Remove Click this to remove the selected monitor mode profile. NWA1123-ACv2 User’s Guide...

  • Page 92: Add/Edit Mon Profile

    This screen allows you to create a new monitor mode profile or edit an existing one. To access this screen, click the Add button or select and existing monitor mode profile and click the Edit button. Figure 57 Configuration > Object > MON Profile > Add/Edit MON Profile NWA1123-ACv2 User’s Guide...

  • Page 93: Technical Reference

    AP’s weaker (or non-existent) security to gain access to the network, or set up their own rogue APs in order to capture information from wireless clients. If a scan reveals a rogue AP, you can use commercially-available software to physically locate it. NWA1123-ACv2 User’s Guide...
  • Page 94 (those from recognized networks, for example). It is recommended that you export (save) your list of friendly APs often, especially if you have a network with a large number of access points. NWA1123-ACv2 User’s Guide...

  • Page 95: Wds Profile

    This chapter shows you how to configure WDS (Wireless Disbribution System) profiles for the NWA to form a WDS with other APs. Note: At the time of writing, the NWA1123-ACv2 cannot build a WDS connection with the previous NWA1120 series, such as the NWA1121-NI, NWA1123-NI or NWA1123- 10.1.1 What You Can Do in this Chapter...

  • Page 96: Add/Edit Wds Profile

    64 hexadecimal characters. The key is used to encrypt the traffic between the APs. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 97: Certificates

    Jenny receives the message and uses Tim’s public key to verify it. Jenny knows that the message is from Tim, and that although other people may have been able to read the message, no-one can have altered it (because they cannot re-sign the message with Tim’s private key). NWA1123-ACv2 User’s Guide...
  • Page 98 The NWA currently allows the importation of a PKS#7 file that contains a single certificate. • PEM (Base-64) encoded PKCS#7: This Privacy Enhanced Mail (PEM) format uses lowercase letters, uppercase letters and numerals to convert a binary PKCS#7 certificate into a printable form. NWA1123-ACv2 User’s Guide...

  • Page 99: Verifying A Certificate

    Use a secure method to verify that the certificate owner has the same information in the Thumbprint Algorithm and Thumbprint fields. The secure method may very based on your situation. Possible examples would be over the telephone or through an HTTPS connection. NWA1123-ACv2 User’s Guide...

  • Page 100: My Certificates

    Use the My Certificate Import screen to import the certificate and replace the request. SELF represents a self-signed certificate. CERT represents a certificate issued by a certification authority. NWA1123-ACv2 User’s Guide...

  • Page 101: Add My Certificates

    Click Configuration > Object > Certificate > My Certificates and then the Add icon to open the Add My Certificates screen. Use this screen to have the NWA create a self-signed certificate, enroll a certificate with a certification authority or generate a certification request. NWA1123-ACv2 User’s Guide...
  • Page 102 Chapter 11 Certificates Figure 62 Configuration > Object > Certificate > My Certificates > Add NWA1123-ACv2 User’s Guide...
  • Page 103 Certificate Edit screen to view the certification request and copy it to send to the locally for later certification authority. manual enrollment Copy the certification request from the My Certificate Edit screen and then send it to the certification authority. NWA1123-ACv2 User’s Guide...
  • Page 104 Add My Certificates screen. Click Return and check your information in the Add My Certificates screen. Make sure that the certification authority information is correct and that your Internet connection is working properly if you want the NWA to enroll a certificate online. NWA1123-ACv2 User’s Guide...

  • Page 105: Edit My Certificates

    Click Configuration > Object > Certificate > My Certificates and then the Edit icon to open the My Certificate Edit screen. You can use this screen to view in-depth certificate information and change the certificate’s name. Figure 63 Configuration > Object > Certificate > My Certificates > Edit NWA1123-ACv2 User’s Guide...
  • Page 106 “DigitalSignature” means that the key can be used to sign certificates and “KeyEncipherment” means that the key can be used to encrypt text. Extended Key This field displays for what EKU (Extended Key Usage) functions the certificate’s key can Usage be used. NWA1123-ACv2 User’s Guide...

  • Page 107: Import Certificates

    NWA. You can also import a certificate in PKCS#12 format, including the certificate’s public and private keys. The certificate you import replaces the corresponding request in the My Certificates screen. You must remove any spaces in the certificate’s filename before you can import it. NWA1123-ACv2 User’s Guide...

  • Page 108: Trusted Certificates

    The NWA also accepts any valid certificate signed by a certificate on this list as being trustworthy; thus you do not need to import any certificate that is signed by one of these certificates. NWA1123-ACv2 User’s Guide...
  • Page 109 Click Import to open a screen where you can save the certificate of a certification authority that you trust, from your computer to the NWA. Refresh Click this button to display the current validity status of the certificates. NWA1123-ACv2 User’s Guide...

  • Page 110: Edit Trusted Certificates

    NWA to check a certification authority’s list of revoked certificates before trusting a certificate issued by the certification authority. Figure 66 Configuration > Object > Certificate > Trusted Certificates > Edit NWA1123-ACv2 User’s Guide...
  • Page 111 Common Name (CN), Organizational Unit (OU), Organization (O) and Country (C). Issuer This field displays identifying information about the certificate’s issuing certification authority, such as Common Name, Organizational Unit, Organization and Country. With self-signed certificates, this is the same information as in the Subject Name field. NWA1123-ACv2 User’s Guide...

  • Page 112: Import Trusted Certificates

    Click Configuration > Object > Certificate > Trusted Certificates > Import to open the Import Trusted Certificates screen. Follow the instructions in this screen to save a trusted certificate to the NWA. Note: You must remove any spaces from the certificate’s filename before you can import the certificate. NWA1123-ACv2 User’s Guide...

  • Page 113: Technical Reference

    The second is a reduction in network traffic since the NWA only gets information on the certificates that it needs to verify, not a huge list. When the NWA requests certificate status information, the OCSP server returns a “expired”, “current” or “unknown” response. NWA1123-ACv2 User’s Guide...

  • Page 114: System

    12.2 Host Name A host name is the unique name by which a device is known on a network. Click Configuration > System > Host Name to open this screen. Figure 68 Configuration > System > Host Name NWA1123-ACv2 User’s Guide...

  • Page 115: Date And Time

    To change your NWA’s time based on your local time zone and date, click Configuration > System > Date/Time. The screen displays as shown. You can manually set the NWA’s time and date or have the NWA get the date and time from a time server. NWA1123-ACv2 User’s Guide...
  • Page 116 This field displays the last updated date from the time server or the last date configured (yyyy-mm-dd) manually. When you set Time and Date Setup to Manual, enter the new date in this field and then click Apply. NWA1123-ACv2 User’s Guide...
  • Page 117 For example, if you set this field to 3.5, a log occurred at 6 P.M. in local official time will appear as if it had occurred at 10:30 P.M. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA1123-ACv2 User’s Guide...

  • Page 118: Pre-Defined Ntp Time Servers List

    Enter the NWA’s date in the New Date field. Under Time Zone Setup, select your Time Zone from the list. As an option you can select the Enable Daylight Saving check box to adjust the NWA clock for daylight savings. Click Apply. NWA1123-ACv2 User’s Guide...

  • Page 119: Www Overview

    The management session does not time out when a statistics screen is polling. Each user is also forced to log in the NWA for authentication again when the reauthentication time expires. You can change the timeout settings in the User screens. NWA1123-ACv2 User’s Guide...

  • Page 120: Https

    Note: If you disable HTTP in the WWW screen, then the NWA blocks all HTTP connection attempts. 12.4.4 Configuring WWW Service Control Click Configuration > System > WWW to open the WWW screen. Use this screen to specify HTTP or HTTPS settings. NWA1123-ACv2 User’s Guide...
  • Page 121 NWA. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA1123-ACv2 User’s Guide...

  • Page 122: Https Example

    Click Technical Details if you want to verify more information about the certificate from the NWA. Select I Understand the Risks and then click Add Exception to add the NWA to the security exception list. Click Confirm Security Exception. NWA1123-ACv2 User’s Guide...
  • Page 123 • The issuing certificate authority of the NWA’s HTTPS server certificate is not one of the browser’s trusted certificate authorities. The issuing certificate authority of the NWA's factory default certificate is the NWA itself since the certificate is a self-signed certificate. NWA1123-ACv2 User’s Guide...
  • Page 124 Apply for a certificate from a Certification Authority (CA) that is trusted by the NWA (see the NWA’s Trusted Certificates Web Configurator screen). Figure 77 Trusted Certificates The CA sends you a package containing the CA’s trusted certificate(s), your personal certificate(s) and a password to install the personal certificate(s). NWA1123-ACv2 User’s Guide...
  • Page 125 You need a password in advance. The CA may issue the password or you may have to specify it during the enrollment. Double-click the personal certificate given to you by the CA to produce a screen similar to the one shown next NWA1123-ACv2 User’s Guide...
  • Page 126 Chapter 12 System Click Next to begin the wizard. The file name and path of the certificate you double-clicked should automatically appear in the File name text box. Click Browse if you wish to import a different certificate. NWA1123-ACv2 User’s Guide...
  • Page 127 Chapter 12 System Enter the password given to you by the CA. Have the wizard determine where the certificate should be saved on your computer or select Place all certificates in the following store and choose a different location. NWA1123-ACv2 User’s Guide...
  • Page 128 You should see the following screen when the certificate is correctly installed on your computer. 12.4.5.7 Using a Certificate When Accessing the NWA To access the NWA via HTTPS: Enter ‘https://NWA IP Address/ in your browser’s web address field. NWA1123-ACv2 User’s Guide...

  • Page 129: Ssh

    B on the Internet uses SSH to securely connect to the NWA (A) for a management session. Figure 78 SSH Communication Over the WAN Example 12.5.1 How SSH Works The following figure is an example of how a secure connection is established between two remote hosts using SSH v1. NWA1123-ACv2 User’s Guide...

  • Page 130: Ssh Implementation On The Nwa

    12.5.2 SSH Implementation on the NWA Your NWA supports SSH versions 1 and 2 using RSA authentication and four encryption methods (AES, 3DES, Archfour, and Blowfish). The SSH server is implemented on the NWA for management using port 22 (by default). NWA1123-ACv2 User’s Guide...

  • Page 131: Requirements For Using Ssh

    NWA. The configuration and connection steps are similar for most SSH client programs. Refer to your SSH client program user’s guide. 12.5.5.1 Example 1: Microsoft Windows This section describes how to access the NWA using the Secure Shell Client program. NWA1123-ACv2 User’s Guide...
  • Page 132 The authenticity of host '192.168.1.2 (192.168.1.2)' can't be established. RSA1 key fingerprint is 21:6c:07:25:7e:f4:75:80:ec:af:bd:d4:3d:80:53:d1. Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added '192.168.1.2' (RSA1) to the list of known hosts. Administrator@192.168.1.2's password: NWA1123-ACv2 User’s Guide...

  • Page 133: Telnet

    Chapter 14 on page 152 for more information about firmware and configuration files. To change your NWA’s FTP settings, click Configuration > System > FTP tab. The screen appears as shown. Use this screen to specify FTP settings. NWA1123-ACv2 User’s Guide...

  • Page 134: Snmp

    Your NWA supports SNMP agent functionality, which allows a manager station to manage and monitor the NWA through the network. The NWA supports SNMP version one (SNMPv1), version two (SNMPv2c), and version three (SNMPv3). The next figure illustrates an SNMP management operation. NWA1123-ACv2 User’s Guide...

  • Page 135: Supported Mibs

    The NWA supports MIB II that is defined in RFC-1213 and RFC-1215. The NWA also supports private MIBs (ZYXEL-ES-COMMON.MIB, ZYXEL-ES-ZyXELAPMgmt.MIB, ZYXEL-ES-PROWLAN.MIB, ZYXEL- ES-RFMGMT.MIB, ZYXEL-ES-SMI.MIB, and ZYXEL-ES-WIRELESS.MIB) to collect information about CPU and memory usage and VPN total throughput. The focus of the MIBs is to let administrators NWA1123-ACv2 User’s Guide...

  • Page 136: Snmp Traps

    Select the check box to allow or disallow users to access the NWA using SNMP. Server Port You may change the server port number for a service if needed, however you must use the same port number in order to use that service for remote management. NWA1123-ACv2 User’s Guide...

  • Page 137: Adding Or Editing An Snmpv3 User Profile

    This screen allows you to add or edit an SNMPv3 user profile. To access this screen, click the Configuration > System > SNMP screen’s Add button or select a SNMPv3 user profile from the list and click the Edit button. Figure 88 Configuration > System > SNMP > Add NWA1123-ACv2 User’s Guide...
  • Page 138 Select whether the SNMPv3 user can have read-only or read and write access to the NWA using this SNMPv3 user profile. Click OK to save your changes back to the NWA. Cancel Click Cancel to exit this screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 139: Log And Report

    Note: Data collection may decrease the NWA’s traffic throughput rate. Click Configuration > Log & Report > Email Daily Report to display the following screen. Configure this screen to have the NWA e-mail you system statistics every day. NWA1123-ACv2 User’s Guide...
  • Page 140 Chapter 13 Log and Report Figure 89 Configuration > Log & Report > Email Daily Report NWA1123-ACv2 User’s Guide...

  • Page 141: Log Setting

    The NWA provides a system log and supports e-mail profiles and remote syslog servers. The system log is available on the View Log screen, the e-mail profiles are used to mail log messages to the specified destinations, and the other four logs are stored on specified syslog servers. NWA1123-ACv2 User’s Guide...

  • Page 142: Log Setting

    Double-click an entry or select it and click Edit to open a screen where you can modify the entry’s settings. Activate To turn on an entry, select it and click Activate. Inactivate To turn off an entry, select it and click Inactivate. NWA1123-ACv2 User’s Guide...

  • Page 143: Edit System Log Settings

    13.3.2 Edit System Log Settings This screen controls the detailed settings for each log in the system log (which includes the e-mail profiles). Select a system log entry in the Log Setting screen and click the Edit icon. NWA1123-ACv2 User’s Guide...
  • Page 144 You specify what kinds of log messages are included in log information and what kinds of log messages are included in alerts in the Active Log and Alert section. Mail Server Type the name or IP address of the outgoing SMTP server. NWA1123-ACv2 User’s Guide...
  • Page 145 Using the System Log drop-down list to disable all logs overrides your e-mail server 1 settings. enable normal logs (green check mark) - e-mail log messages for all categories to e-mail server 1. enable alert logs (red exclamation point) - e-mail alerts for all categories to e-mail server 1. NWA1123-ACv2 User’s Guide...

  • Page 146: Edit Remote Server

    Click this to return to the previous screen without saving your changes. 13.3.3 Edit Remote Server This screen controls the settings for each log in the remote server (syslog). Select a remote server entry in the Log Setting screen and click the Edit icon. NWA1123-ACv2 User’s Guide...
  • Page 147 Chapter 13 Log and Report Figure 92 Configuration > Log & Report > Log Setting > Edit Remote Server NWA1123-ACv2 User’s Guide...

  • Page 148: Active Log Summary

    It does not let you change other log settings (for example, where and how often log information is e-mailed or remote server names). To access this screen, go to the Log Setting screen, and click the Active Log Summary button. NWA1123-ACv2 User’s Guide...
  • Page 149 Figure 93 Active Log Summary This screen provides a different view and a different way of indicating which messages are included in each log and each alert. (The Default category includes debugging messages generated by open source software.) NWA1123-ACv2 User’s Guide...
  • Page 150 (green checkmark) - create log messages and alerts from this category enable normal logs and debug logs (yellow check mark) - create log messages, alerts, and debugging information from this category; the NWA does not e-mail debugging information, however, even if this setting is selected. NWA1123-ACv2 User’s Guide...
  • Page 151 (yellow check mark) - log regular information, alerts, and debugging information from this category Click this to save your changes and return to the previous screen. Cancel Click this to return to the previous screen without saving your changes. NWA1123-ACv2 User’s Guide...

  • Page 152: File Manager

    # enter configuration mode configure terminal # change administrator password username admin password 4321 user-type admin #configure default radio profile, change 2GHz channel to 11 & Tx output power # to 50% wlan-radio-profile default 2g-channel 11 output-power 50% exit write NWA1123-ACv2 User’s Guide...

  • Page 153: Configuration File

    The NWA still generates a log for any errors. 14.2 Configuration File Click Maintenance > File Manager > Configuration File to open this screen. Use the Configuration File screen to store, run, and name configuration files. You can also download NWA1123-ACv2 User’s Guide...
  • Page 154 The NWA still generates a log for any errors. Figure 95 Maintenance > File Manager > Configuration File Do not turn off the NWA while configuration file upload is in progress. NWA1123-ACv2 User’s Guide...
  • Page 155 Specify a name for the duplicate configuration file. Use up to 25 characters (including a-zA- Z0-9;‘~!@#$%^&()_+[]{}’,.=-). Click OK to save the duplicate or click Cancel to close the screen without saving a duplicate of the configuration file. NWA1123-ACv2 User’s Guide...
  • Page 156 This column displays the number for each configuration file entry. This field is a sequential value, and it is not associated with a specific address. The total number of configuration files that you can save depends on the sizes of the configuration files and the available flash storage space. NWA1123-ACv2 User’s Guide...

  • Page 157: Example Of Configuration File Download Using Ftp

    Enter your password as requested. Use “cd” to change to the directory that contains the files you want to download. Use “dir” or “ls” if you need to display a list of the files in the directory. NWA1123-ACv2 User’s Guide...

  • Page 158: Firmware Package

    Find the firmware package at www.zyxel.com in a file that (usually) uses a .bin extension. The firmware update can take up to five minutes. Do not turn off or reset the NWA while the firmware update is in progress! NWA1123-ACv2 User’s Guide...

  • Page 159: Example Of Firmware Upload Using Ftp

    14.3.1 Example of Firmware Upload Using FTP This procedure requires the NWA’s firmware. Download the firmware package from www.zyxel.com and unzip it. The firmware file uses a .bin extension, for example, "426ABEL0C0.bin". Do the following after you have obtained the firmware file. NWA1123-ACv2 User’s Guide...

  • Page 160: Shell Script

    Click Maintenance > File Manager > Shell Script to open this screen. Use the Shell Script screen to store, name, download, upload and run shell script files. You can store multiple shell script files on the NWA at the same time. NWA1123-ACv2 User’s Guide...
  • Page 161 This column displays the number for each shell script file entry. File Name This column displays the label that identifies a shell script file. Size This column displays the size (in KB) of a shell script file. NWA1123-ACv2 User’s Guide...
  • Page 162 Type in the location of the file you want to upload in this field or click Browse... to find it. Browse... Click Browse... to find the .zysh file you want to upload. Upload Click Upload to begin the upload process. This process may take up to several minutes. NWA1123-ACv2 User’s Guide...

  • Page 163: Diagnostics

    This screen provides an easy way for you to generate a file containing the NWA’s configuration and diagnostic information. You may need to generate this file and send it to customer support during troubleshooting. Click Maintenance > Diagnostics to open the Diagnostic screen. NWA1123-ACv2 User’s Guide...
  • Page 164 You can upload a new shell script file using the Maintenance > File Manager > Shell Script screen. Collect Now Click this to have the NWA create a new diagnostic file. Download Click this to save the most recent diagnostic file to a computer. NWA1123-ACv2 User’s Guide...

  • Page 165: Leds

    Note: When the , the LED will lit regardless of NWA is booting or performing firmware upgrade the setting in LED suppression. To access this screen, click Maintenance > LEDs > Suppression. Figure 100 Maintenance > LEDs > Suppression NWA1123-ACv2 User’s Guide...
  • Page 166 If the check box is unchecked, the LED will stay lit after the NWA is ready. Apply Click Apply to save your changes back to the NWA. Reset Click Reset to return the screen to its last-saved settings. NWA1123-ACv2 User’s Guide...

  • Page 167: Reboot

    Click the Reboot button to restart the NWA. Wait a few minutes until the login screen appears. If the login screen does not appear, type the IP address of the device in your Web browser. You can also use the CLI command reboot to restart the NWA. NWA1123-ACv2 User’s Guide...

  • Page 168: Shutdown

    Click the Shutdown button to shut down the NWA. Wait for the device to shut down before you manually turn off or remove the power. It does not turn off the power. You can also use the CLI command shutdown to shut down the NWA. NWA1123-ACv2 User’s Guide...

  • Page 169: Troubleshooting

    Section 1.5 on page Check the hardware connections. See the Quick Start Guide. Inspect your cables for damage. Contact the vendor to replace any damaged cables. Disconnect and re-connect the power adaptor or PoE power injector to the NWA. NWA1123-ACv2 User’s Guide...

  • Page 170: Nwa Access And Login

    Reset the device to its factory defaults, and try to access the NWA with the default IP address. See Section 19.6 on page 175. If the problem continues, contact the network administrator or vendor, or try one of the advanced suggestions. Advanced Suggestions NWA1123-ACv2 User’s Guide...

  • Page 171: Internet Access

    Ignore the suggestions about your browser. 19.4 Internet Access I cannot access the Internet. Check the hardware connections, and make sure the LED is behaving as expected. See the Quick Start Guide and Section 19.2 on page 169. NWA1123-ACv2 User’s Guide...

  • Page 172: Wireless Connections

    Check the settings for QoS. If it is disabled, you might consider activating it. If it is enabled, you might consider raising or lowering the priority for some applications. 19.5 Wireless Connections I cannot access the NWA or ping any computer from the WLAN. NWA1123-ACv2 User’s Guide...
  • Page 173 A PKCS #7 file is used to transfer a public key certificate. The private key is not included. The NWA currently allows the importation of a PKS#7 file that contains a single certificate. NWA1123-ACv2 User’s Guide...
  • Page 174 • Make sure that all the APs are in the same broadcast domain. • Make sure that the wireless clients are in range of the other APs; if they are only in range of a single AP, then load balancing may not be as effective. NWA1123-ACv2 User’s Guide...

  • Page 175: Resetting The Nwa

    Release the RESET button, and wait for the NWA to restart. You should be able to access the NWA using the default settings. 19.7 Getting More Troubleshooting Help Search for support information for your model at www.zyxel.com for more troubleshooting suggestions. NWA1123-ACv2 User’s Guide...

  • Page 176: Appendix A Importing Certificates

    ) somewhere in the main browser window (not all browsers show the padlock in the same location). Internet Explorer The following example uses Microsoft Internet Explorer 7 on Windows XP Professional; however, they can also apply to Internet Explorer on Windows Vista. NWA1123-ACv2 User’s Guide...
  • Page 177 If your device’s Web Configurator is set to use SSL certification, then the first time you browse to it you are presented with a certification error. Click Continue to this website (not recommended). In the Address Bar, click Certificate Error > View certificates. NWA1123-ACv2 User’s Guide...
  • Page 178 Appendix A Importing Certificates In the Certificate dialog box, click Install Certificate. In the Certificate Import Wizard, click Next. NWA1123-ACv2 User’s Guide...
  • Page 179 Next again and then go to step 9. Otherwise, select Place all certificates in the following store and then click Browse. In the Select Certificate Store dialog box, choose a location in which to save the certificate and then click OK. NWA1123-ACv2 User’s Guide...
  • Page 180 Appendix A Importing Certificates In the Completing the Certificate Import Wizard screen, click Finish. 10 If you are presented with another Security Warning, click Yes. 11 Finally, click OK when presented with the successful certificate installation message. NWA1123-ACv2 User’s Guide...
  • Page 181 Double-click the public key certificate file. In the security warning dialog box, click Open. Refer to steps 4-12 in the Internet Explorer procedure beginning on page 176 to complete the installation process. NWA1123-ACv2 User’s Guide...
  • Page 182 This section shows you how to remove a public key certificate in Internet Explorer 7 on Windows XP. Open Internet Explorer and click Tools > Internet Options. In the Internet Options dialog box, click Content > Certificates. NWA1123-ACv2 User’s Guide...
  • Page 183 In the Certificates confirmation, click Yes. In the Root Certificate Store dialog box, click Yes. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA1123-ACv2 User’s Guide...
  • Page 184 The certificate is stored and you can now connect securely to the Web Configurator. A sealed padlock appears in the address bar, which you can click to open the Page Info > Security window to view the web page’s security information. NWA1123-ACv2 User’s Guide...
  • Page 185 Rather than browsing to a ZyXEL Web Configurator and installing a public key certificate when prompted, you can install a stand-alone certificate file if one has been issued to you. Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA1123-ACv2 User’s Guide...
  • Page 186 The next time you visit the web site, click the padlock in the address bar to open the Page Info > Security window to see the web page’s security information. Removing a Certificate in Firefox This section shows you how to remove a public key certificate in Firefox 2. NWA1123-ACv2 User’s Guide...
  • Page 187 Appendix A Importing Certificates Open Firefox and click Tools > Options. In the Options dialog box, click Advanced > Encryption > View Certificates. NWA1123-ACv2 User’s Guide...
  • Page 188 Delete. In the Delete Web Site Certificates dialog box, click OK. The next time you go to the web site that issued the public key certificate you just removed, a certification error appears. NWA1123-ACv2 User’s Guide...

  • Page 189: Appendix B Ipv6

    “private IP address” in IPv4. You can have the same link-local address on multiple interfaces on a device. A link-local unicast address has a predefined prefix of fe80::/10. The link-local unicast address format is as follows. Table 76 Link-local Unicast Address Format 1111 1110 10 Interface ID 10 bits 54 bits 64 bits NWA1123-ACv2 User’s Guide...
  • Page 190 FF05:0:0:0:0:0:1:3 The following table describes the multicast addresses which are reserved and can not be assigned to a multicast group. Table 78 Reserved Multicast Address MULTICAST ADDRESS FF00:0:0:0:0:0:0:0 FF01:0:0:0:0:0:0:0 FF02:0:0:0:0:0:0:0 FF03:0:0:0:0:0:0:0 FF04:0:0:0:0:0:0:0 FF05:0:0:0:0:0:0:0 FF06:0:0:0:0:0:0:0 FF07:0:0:0:0:0:0:0 FF08:0:0:0:0:0:0:0 FF09:0:0:0:0:0:0:0 NWA1123-ACv2 User’s Guide...
  • Page 191 (beginning with fe80). When the interface is connected to a network with a router and the NWA is set to automatically obtain an IPv6 network prefix from the router for the interface, it generates another address which NWA1123-ACv2 User’s Guide...

  • Page 192: Dhcp Relay Agent

    The DHCP relay agent can add the remote identification (remote-ID) option and the interface-ID option to the Relay-Forward DHCPv6 messages. The remote-ID option carries a user-defined string, In IPv6, all network interfaces can be associated with several addresses. NWA1123-ACv2 User’s Guide...
  • Page 193 When the NWA needs to send a packet, it first consults the destination cache to determine the next hop. If there is no matching entry in the destination cache, the NWA uses the prefix list to NWA1123-ACv2 User’s Guide...
  • Page 194 Done message to the router or switch. The router or switch then sends a group-specific query to the port on which the Done message is received to determine if other devices connected to this port should remain in the group. NWA1123-ACv2 User’s Guide...
  • Page 195 Install Dibbler and select the DHCPv6 client option on your computer. After the installation is complete, select Start > All Programs > Dibbler-DHCPv6 > Client Install as service. Select Start > Control Panel > Administrative Tools > Services. Double click Dibbler - a DHCPv6 client. NWA1123-ACv2 User’s Guide...
  • Page 196 Windows 7 supports IPv6 by default. DHCPv6 is also enabled when you enable IPv6 on a Windows 7 computer. To enable IPv6 in Windows 7: Select Control Panel > Network and Sharing Center > Local Area Connection. Select the Internet Protocol Version 6 (TCP/IPv6) checkbox to enable it. Click OK to save the change. NWA1123-ACv2 User’s Guide...
  • Page 197 IPv4 Address... : 172.16.100.61 Subnet Mask ... : 255.255.255.0 Default Gateway ..: fe80::213:49ff:feaa:7125%11 172.16.100.254 NWA1123-ACv2 User’s Guide...

  • Page 198: Appendix C Customer Support

    • Brief description of the problem and the steps you took to solve it. Corporate Headquarters (Worldwide) Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com Asia China • ZyXEL Communications (Shanghai) Corp. ZyXEL Communications (Beijing) Corp. ZyXEL Communications (Tianjin) Corp. • http://www.zyxel.cn India • ZyXEL Technology India Pvt Ltd • http://www.zyxel.in Kazakhstan •...
  • Page 199 • ZyXEL Singapore Pte Ltd. • http://www.zyxel.com.sg Taiwan • ZyXEL Communications Corporation • http://www.zyxel.com/tw/zh/ Thailand • ZyXEL Thailand Co., Ltd • http://www.zyxel.co.th Vietnam • ZyXEL Communications Corporation-Vietnam Office • http://www.zyxel.com/vn/vi Europe Austria • ZyXEL Deutschland GmbH • http://www.zyxel.de Belarus • ZyXEL BY • http://www.zyxel.by...
  • Page 200 Appendix C Customer Support Belgium • ZyXEL Communications B.V. • http://www.zyxel.com/be/nl/ • http://www.zyxel.com/be/fr/ Bulgaria • ZyXEL България • http://www.zyxel.com/bg/bg/ Czech Republic • ZyXEL Communications Czech s.r.o • http://www.zyxel.cz Denmark • ZyXEL Communications A/S • http://www.zyxel.dk Estonia • ZyXEL Estonia • http://www.zyxel.com/ee/et/ Finland •...
  • Page 201 • ZyXEL Communications Poland • http://www.zyxel.pl Romania • ZyXEL Romania • http://www.zyxel.com/ro/ro Russia • ZyXEL Russia • http://www.zyxel.ru Slovakia • ZyXEL Communications Czech s.r.o. organizacna zlozka • http://www.zyxel.sk Spain • ZyXEL Communications ES Ltd • http://www.zyxel.es Sweden • ZyXEL Communications • http://www.zyxel.se Switzerland •...
  • Page 202 Appendix C Customer Support • http://www.zyxel.ch/ Turkey • ZyXEL Turkey A.S. • http://www.zyxel.com.tr • ZyXEL Communications UK Ltd. • http://www.zyxel.co.uk Ukraine • ZyXEL Ukraine • http://www.ua.zyxel.com Latin America Argentina • ZyXEL Communication Corporation • http://www.zyxel.com/ec/es/ Brazil • ZyXEL Communications Brasil Ltda.
  • Page 203 Appendix C Customer Support North America • ZyXEL Communications, Inc. - North America Headquarters • http://www.zyxel.com/us/en/ Oceania Australia • ZyXEL Communications Corporation • http://www.zyxel.com/au/en/ Africa South Africa • Nology (Pty) Ltd. • http://www.zyxel.co.za NWA1123-ACv2 User’s Guide...

  • Page 204: Appendix D Legal Information

    The contents of this publication may not be reproduced in any part or as a whole, transcribed, stored in a retrieval system, translated into any language, or transmitted in any form or by any means, electronic, mechanical, magnetic, optical, chemical, photocopying, manual, or otherwise, without the prior written permission of ZyXEL Communications Corporation. Published by ZyXEL Communications Corporation. All rights reserved.
  • Page 205 Antenna Information ANTENNA MODEL TYPE CONNECTOR 2.4 G GAIN 5 G GAIN NWA1123-ACv2 2.4 GHz PIFA U.FL 3.08 (2400-2483.5MHz) Antenna PIFA U.FL 3.07 (2400-2483.5MHz)
  • Page 206 Prin prezenta, ZyXEL declară că acest echipament este în conformitate cu cerinţele esenţiale şi alte prevederi (Romanian) relevante ale Directivei 1999/5/EC. Slovenčina ZyXEL týmto vyhlasuje, že zariadenia spĺňa základné požiadavky a všetky príslušné ustanovenia Smernice 1999/5/EC. (Slovak) NWA1123-ACv2 User’s Guide...
  • Page 207 2. The regulatory limits for maximum output power are specified in EIRP. The EIRP level (in dBm) of a device can be calculated by adding the gain of the antenna used(specified in dBi) to the output power available at the connector (specified in dBm). NWA1123-ACv2 User’s Guide...

  • Page 208: Safety Warnings

    If this product is end of life, take it to a recycling station designated by local authorities. At the time of disposal, the separate collection of your product and/or its battery will help save natural resources and ensure that the environment is sustainable development. NWA1123-ACv2 User’s Guide...
  • Page 209 Symbolen innebär att enligt lokal lagstiftning ska produkten och/eller dess batteri kastas separat från hushållsavfallet. När den här produkten når slutet av sin livslängd ska du ta den till en återvinningsstation. Vid tiden för kasseringen bidrar du till en bättre miljö och mänsklig hälsa genom att göra dig av med den på ett återvinningsställe. NWA1123-ACv2 User’s Guide...
  • Page 210 Appendix D Legal Information Environmental Product Declaration NWA1123-ACv2 User’s Guide...
  • Page 211 Various symbols are used in this product to ensure correct usage, to prevent danger to the user and others, and to prevent property damage. The meaning of these symbols are described below. It is important that you read these descriptions thoroughly and fully understand the contents. NWA1123-ACv2 User’s Guide...
  • Page 212 This product contains in part some free software distributed under GPL license terms and/or GPL like licenses. Open source licenses are provided with the firmware package. You can download the latest firmware at www.zyxel.com. To obtain the source code covered under those Licenses, please contact support@zyxel.com.tw to get it. NWA1123-ACv2 User’s Guide...

  • Page 213: Index

    143, 148 CA (Certificate Authority), see certificates configuration information CEF (Common Event Format) 143, 148 configuration files Certificate Authority (CA) at restart see certificates backing up Certificate Management Protocol (CMP) downloading Certificate Revocation List (CRL) downloading with FTP NWA1123-ACv2 User’s Guide...
  • Page 214 DSA Quick Start disclaimer documentation related domain name HTTP dual radios over SSL, see HTTPS dual-radio application redirect to HTTPS dynamic channel selection vs HTTPS HTTPS and certificates authenticating clients avoiding warning messages example e-mail vs HTTP NWA1123-ACv2 User’s Guide...
  • Page 215 MAC address stateless autoconfiguration range unspecified address maintenance management Management Information Base (MIB) managing the device good habits Java using FTP. See FTP. permissions MBSSID JavaScripts memory usage 32, 35 message bar messages warning key pairs model name NWA1123-ACv2 User’s Guide...
  • Page 216 Public-Key Infrastructure (PKI) limitations public-private key pairs timeouts Service Set Service Set Identifier see SSID shell scripts Quick Start Guide downloading editing how applied managing syntax uploading radio shutdown 17, 168 reboot 17, 167 NWA1123-ACv2 User’s Guide...
  • Page 217 69, 71 supported browsers default reauthentication time 69, 71 syslog lease time 143, 148 limited-admin (type) syslog servers, see also logs lockout system log, see logs reauthentication time NWA1123-ACv2 User’s Guide...
  • Page 218 WEP (Wired Equivalent Privacy) wireless channel wireless client Wireless Distribution System (WDS) wireless LAN Wireless network overview wireless network example wireless profile layer-2 isolation MAC filtering radio security SSID wireless security 11, 173 wireless station WLAN interface NWA1123-ACv2 User’s Guide...

Table of Contents

Save PDF